This document discusses two modeling languages - Business Process Model Notation (BPMN) and Little-JIL Process Definition Language - that can be used to model clinical workflows. It compares the benefits and limitations of each language. BPMN is more widely used but has limitations around exception handling and resource management. Little-JIL provides more comprehensive exception handling and resource management capabilities but is less widely used and requires more time for modeling. The document also demonstrates how Little-JIL can be used to verify properties of a clinical workflow model and derive fault trees to check for errors.

1. Modeling Clinical Workflows By Sean Avery, Michael Sutton, Stephen Foglietta, David Arney, Tracy Rausch, CCE, Julian Goldman, MD DocBox Proprietary Information 2011

2. Two Views of a Clinical Process X-Ray Ventilator Workflow Business Process Model Notation (BPMN) X-Ray Ventilator Workflow Little-JIL Process Definition Language DocBox Proprietary Information 2011

4. Easily Trace Process Flow

5. Industry Standard

6. Aids in Validation

8. No Exception Handling

9. Representing Process Variation

10. Property Verification

11. Process Concurrency

12. Timing PropertiesDocBox Proprietary Information 2011

14. Resource Management

15. Concurrency

16. Built on Formally Defined Semantics

17. Property Verification

19. Greater Time Requirement for Modeling Processes

20. No Easy Conversion to other Modeling Languages

21. Limited Timing PropertiesDocBox Proprietary Information 2011 Little-JIL, Little-JIL Analyzer, Propel, and FLAVERS software developed by the Laboratory for Advanced Software Engineering Research (LASER) at University of Massachusetts Amherst

22. Property Verification and Fault-Tree Derivation Here an exception is thrown and handled but the process deviation leads to the property being violated. [This error was seeded to show trace graph] Here we can see depth of safety locks via logic gates, presented here as “OR” (blue ), “AND” (pink ), and “NOT” (green triangles). DocBox Proprietary Information 2011 Property Violated Artifact Flow Check Multiple “And” gates showing Process robustness Exception thrown Property violation trace graph – checking “ventilator started after being stopped” property for violations within the process diagram. Property defined with Propel (PROPerty ELucidator), and verified using FLAVERS (FLow Analysis for VERification of Systems) software. Minimal cut set of “Timer-Check” fault-tree – Checking “timer” parameter for correctness during each step presented in the Little-JIL process diagram. Fault-Tree derived directly by mathematical extrapolation done on the Little-JIL process model using Little-JIL Analyzer software. Little-JIL, Little-JIL Analyzer, Propel, and FLAVERS software developed by the Laboratory for Advanced Software Engineering Research (LASER) at University of Massachusetts Amherst